Author: HackWatchit

Searchlight Cyber has launched new AI capabilities within its dark web investigations platform, Cerberus. The new Cerberus AI Insights feature summarizes dark web posts and threads to help analysts to quickly triage information and focus on the dark web content that is most relevant to their investigation and operational scope. Searchlight Cyber’s dark web investigation platform Cerberus contains more than 15 years of historic dark web data and continuously captures new posts from dark web sites, marketplaces, and forums. This information is automatically categorized, indexed, and made searchable – making it an invaluable investigative tool for law enforcement and cybersecurity…

Play ransomware affiliate leveraged zero-day to deploy malware Pierluigi Paganini May 07, 2025 The Play ransomware gang exploited a high-severity Windows Common Log File System flaw in zero-day attacks to deploy malware. The Play ransomware gang has exploited a Windows Common Log File System flaw, tracked as CVE-2025-29824, in zero-day attacks to gain SYSTEM privileges and deploy malware on compromised systems. The vulnerability CVE-2025-29824, (CVSS score of 7.8) is a Use after free in Windows Common Log File System Driver that allows an authorized attacker to elevate privileges locally. An attacker who successfully exploited this flaw could gain SYSTEM privileges, Microsoft confirmed that the vulnerability has…

We’re proud to share that Check Point Software Technologies has been named Cloud Security Innovator of the Year by ITP.NET at GISEC 2025! Presented as part of the Security Leadership Awards, this honor celebrates organizations that are pushing boundaries in cloud native security. The award recognizes our commitment to delivering innovative, scalable, and effective cloud security solutions that address today’s most pressing threats—from misconfigurations and data breaches to AI-driven attack tactics. Our recognition as Cloud Security Innovator of the Year highlights the strength of Check Point’s strategy and technology in protecting cloud infrastructure across public, private, and hybrid environments. It…

House lawmakers left with lingering questions about proposed budget cuts at the Department of Homeland Security after a Tuesday oversight hearing with Homeland Security Secretary Kristi Noem. The hearing, before the House Appropriations Committee’s homeland security subcommittee, was held days after the Trump administration released its proposed fiscal 2026 “skinny budget.” The request would increase overall DHS funding — largely at Immigration and Customs Enforcement and Customs and Border Patrol — it would also cut budgets at several component agencies, including the Cybersecurity and Infrastructure Security Agency, the Federal Emergency Management Agency and the Transportation Security Administration. The request would…

Author, Fun & Games, John Strand, Jordan Drysdale, Webcasts Bloxels, christmas, codecademy, CodeCombat, gifts, Hacker kids, Hak5, learning, Ozobot, Python, Snap Circuits, webcast John Strand & Jordan Drysdale// Yes.. Ethical Hacker Kids. The holidays are coming up! Here John & Jordan cover the different games, tools and gifts we can give kids that help teach them the trade. There is nothing, nothing like sitting around with family picking locks, learning to code and helping kids through the latest Holiday Hack Challenge. And!! We will also cover the latest gifts that you can add to YOUR wish list.   Slides available…

Austin, USA / Texas, May 7th, 2025, CyberNewsWire SpyCloud, the leading identity threat protection company, today released an analysis of nearly 6 million phished data records recaptured from the criminal underground over the last six months. Phishing attacks have been growing in scale and sophistication, and SpyCloud’s research reveals that cybercriminals are increasingly targeting high-value identity data that can be used for follow-on attacks like ransomware, account takeover, and fraud.  While the data reflects only a snapshot of the phishing threat landscape, it provides valuable insights for organizations seeking to bolster defenses, enhance user training, and prevent identity-based attacks.  Key…

Date: April 29, 2025Time: 9:30 AM AST | 8:30 AM CDT | 7:00 PM IST Topic: Zero Trust in the Cloud: Strengthening Access Across Hybrid Environments Watch Now Abstract: With companies migrating data storage to cloud environments, new approaches to data security and access management are essential in the current threat landscape. Zero Trust Network Access (ZTNA) has emerged as the most prominent security framework for secure access management across networks of all types and sizes, including hybrid cloud environments. ZTNA provides identity-centric access control that helps minimize the attack surface, thereby preventing unauthorized access. This webinar explores the challenges of…

has become a mainstay of our daily lives, revolutionizing industries, accelerating scientific discoveries, and reshaping how we communicate. Yet, alongside its undeniable benefits, AI has also ignited a range of ethical and social dilemmas that our existing regulatory frameworks have struggled to address. Two tragic incidents from late 2024 serve as grim reminders of the harms that can result from AI systems operating without proper safeguards: in Texas, a chatbot allegedly advised a 17-year-old to kill his parents in response to them limiting his screen time; meanwhile, a 14-year-old boy named Sewell Setzer III became so entangled in an emotional relationship with a…

The Play ransomware gang has exploited a high-severity Windows Common Log File System flaw in zero-day attacks to gain SYSTEM privileges and deploy malware on compromised systems. The vulnerability, tracked as CVE-2025-29824, was tagged by Microsoft as exploited in a limited number of attacks and patched during last month’s Patch Tuesday. “The targets include organizations in the information technology (IT) and real estate sectors of the United States, the financial sector in Venezuela, a Spanish software company, and the retail sector in Saudi Arabia,” Microsoft said in April. Microsoft linked these attacks to the RansomEXX ransomware gang, saying the attackers installed…